19e822f1f0709a2574ed5ede7853d6ca_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

19e822f1f0709a2574ed5ede7853d6ca_JaffaCakes118
Size

39KB
MD5

19e822f1f0709a2574ed5ede7853d6ca
SHA1

609798ba53f24530cb12379634eb2f9cf604e4be
SHA256

0700c5d50090b2f873a566625bd590aaba51ae525f04b1421418d1afd4876167
SHA512

23bbdd0aa6379968b27cab0eb366a6dca636406e42f4dddd20537b6af0a0f7fa84f92f68386e4fe7ee8d2a5ce429f0284894edddb0387482a2dbdc4fe6f2a075
SSDEEP

768:3nzwdhv1CqtPMZ/QaoHo0SUnqjO9SBYt7agOFic/dmOd/ou3yuFLt1fUff9c:kdh9lI/QaoltUYt7qF5rgU3FLPcu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19e822f1f0709a2574ed5ede7853d6ca_JaffaCakes118

Files

19e822f1f0709a2574ed5ede7853d6ca_JaffaCakes118
.exe windows:4 windows x86 arch:x86

979b2df204704b78e982f9654e78845b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFiber
EnumResourceTypesW
ExitProcess
OpenProfileUserMapping
ReadConsoleOutputCharacterW
SetCommConfig
SetConsoleScreenBufferSize
SetFileApisToANSI
TerminateThread

user32

BeginPaint
CloseDesktop
CreateDialogIndirectParamA
GetProcessWindowStation
MoveWindow
PackDDElParam
RegisterClipboardFormatW
ReleaseDC
SetMenuDefaultItem
TranslateMDISysAccel

shell32

Control_FillCache_RunDLLA
ExtractIconResInfoA
RealShellExecuteA
SHFileOperationW
SHGetInstanceExplorer
SHQueryRecycleBinW
SheConvertPathW
SheGetDirA
SheGetPathOffsetW
ShellExecuteEx

gdi32

CreateDiscardableBitmap
CreateFontIndirectW
EndPath
GetCharABCWidthsA
GetMetaFileA
GetTextExtentExPointA
PolyPolyline
PolyTextOutA
Rectangle
SetBrushOrgEx
UpdateColors

Sections

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 36KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE